Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
File:                     A_5dcm806TzhqV2UUY4SI3rD4sY.mft (raw, json)
Hash identifier:          qxqa/7G3az6CNLogsHGFXnuQ+5Rogc6ke5djxfqUOms=
Subject key identifier:   97:01:94:5A:A3:32:D0:BA:31:0D:93:63:13:95:59:04:8D:24:22:7C
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       05A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
Manifest number:          0585
Signing time:             Mon 28 Apr 2025 02:42:24 +0000
Manifest this update:     Mon 28 Apr 2025 02:42:23 +0000
Manifest next update:     Wed 30 Apr 2025 02:42:23 +0000
Files and hashes:         1: A_5dcm806TzhqV2UUY4SI3rD4sY.crl (hash: h0gq72I5a7T1BNZLuwXdGThte3pCZgf4NaYOwHJ2HRw=)
                          2: D92F01EE1ACD11F0A6BBDDEE6DB8BCC6.roa (hash: KM4vZHuMydeShm7mK1+f8c2QL8Cmqxfflt78IiCdqOw=)
                          3: 85EA30261ACD11F091C663EE6DB8BCC6.roa (hash: MZnf3Jru5mDM7rqJRbKCC0WwX6Tw2TMEsMEyy/eEk2k=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: Apr 28 02:42:23 2025 GMT
            Not After : Apr 30 02:42:23 2025 GMT
        Subject: CN=680eeb10-8e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e3:73:0a:b8:59:83:23:e6:6f:02:14:9b:6c:
                    da:93:d5:b2:0a:89:23:49:a7:e5:25:aa:3c:24:6e:
                    78:16:d0:c1:ed:60:13:db:e5:0b:00:1b:7e:4b:d3:
                    1d:73:33:b0:80:5e:12:8d:ea:af:d6:de:13:23:56:
                    d0:96:ba:f2:c2:1c:f1:91:d8:07:8d:cf:b7:0f:0a:
                    6b:ac:b5:0f:66:12:17:88:0e:2b:1b:8a:25:b5:82:
                    9f:ae:ba:f6:fe:5e:17:9d:cf:0b:8b:c1:fb:21:a5:
                    7f:80:14:35:41:bc:ce:a6:9e:30:78:58:c5:b8:76:
                    0a:74:e6:7b:41:4b:c5:95:42:6c:2a:f6:b5:49:43:
                    46:95:b9:0b:31:e2:dd:a8:60:34:05:ce:fc:7d:96:
                    a6:d9:b4:04:b9:5f:76:d7:77:46:73:24:85:f0:8c:
                    e4:e9:fa:b3:4c:db:11:ec:d4:bd:76:14:f3:de:04:
                    08:c2:ed:a4:5d:19:c8:17:bd:b4:24:01:a6:60:d9:
                    74:6a:82:ed:15:25:50:6e:db:9e:55:a5:89:e1:c2:
                    5e:3a:31:b2:15:1f:4e:6f:78:08:b2:13:26:cd:da:
                    f4:b4:6b:c6:3b:aa:cf:f0:86:b4:80:63:7a:8b:4e:
                    98:42:72:e1:61:42:b1:9a:f1:91:5f:2b:d5:82:86:
                    0e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:01:94:5A:A3:32:D0:BA:31:0D:93:63:13:95:59:04:8D:24:22:7C
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:58:7b:02:32:e8:26:86:a3:8d:ff:49:90:c0:e7:ad:5c:37:
         37:45:7c:be:aa:74:a8:aa:b0:22:85:5c:88:a0:70:35:63:a4:
         fa:85:3d:29:1d:ac:05:b6:f5:45:a2:7c:70:0d:e4:f3:d9:f7:
         80:50:ff:a5:1f:21:47:bc:a7:79:cf:d3:8c:e1:59:1b:3d:12:
         ef:d4:38:b6:58:3a:d6:ae:0e:17:51:25:38:58:c9:a5:ac:11:
         b8:3f:3d:d2:fb:c8:7f:fd:88:54:aa:d4:30:56:64:86:9c:df:
         9c:eb:e6:c8:03:fe:ea:3b:b3:2e:5d:1e:e5:1f:89:a7:1d:d3:
         90:70:91:a7:df:50:bf:d9:46:22:ec:10:3d:04:6a:79:54:be:
         44:66:35:e2:a7:13:93:b1:43:34:b9:93:22:5d:99:ba:ca:b3:
         56:90:59:89:cc:c0:e8:be:8a:ba:79:d4:a0:fd:d8:3b:bd:8f:
         c9:57:0e:98:b4:08:3f:58:96:7c:da:3f:f8:d7:2c:f1:4d:3c:
         a9:4e:a1:30:16:94:ad:64:d6:db:d7:7f:b4:db:48:5b:cc:59:
         9c:8a:22:80:97:22:b9:1b:ca:2e:2c:8f:16:4b:26:dc:3b:62:
         0d:ca:17:20:0a:66:46:b1:73:7f:58:a6:46:e9:8e:69:2f:94:
         f3:5f:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:19 2025 by rpki-client on console.sobornost.net